Kia ora, We attempted using EZproxy in combination with IPAuth on DSpace 7.6 a couple of months back and it didn’t work. A very quick test today though did seem to work – not sure what changed!
In my quick test I did get a 500 error when downloading a bitstream – but it also went ahead and downloaded the bitstream, so not sure what that was about. Happy to do a bit more testing but as we’re hosted we may not be able to provide a lot of detail from logs etc. Deborah From: DSpace Technical Support <[email protected]> Sent: Friday, November 17, 2023 6:23 AM To: DSpace Technical Support <[email protected]> Subject: [dspace-tech] Re: EZProxy and DSpace IP auth Caution: This email originated from outside our organisation. Do not click links or open attachments unless you recognize the sender and know the content is safe. Hi Ed, While I'm not 100% certain, this *might* be related to some issues with Proxies (in general) that we've seen in this ticket: https://github.com/DSpace/DSpace/issues/8603 The DSpace 7 backend is *supposed* to be handling proxies properly...but we've had similar issues reported in different features. We have a service provider looking into this (Arvo Consultores). I'm not certain though if this is the same thing happening on the IPAuth side or not yet. So, I'm hoping that others using EZProxy can report back here to let us know if they are seeing similar behavior or not. Tim On Monday, November 13, 2023 at 12:24:44 PM UTC-6 [email protected]<mailto:[email protected]> wrote: Hi folks, Pre-amble: we are running DSpace 7.5, pretty standard configurations. We have some collections that have IP auth configured in that we assign a group based on IP address and that group gets READ access to certain things Anonymous users don't. This works as expected when the user is physically present on the campus network. We also have a very basic EZProxy stanza for our DSpace that only proxies the front end because we just get 500 errors when trying to proxy the backend, and best I can tell that's mostly CORS errors. The group permissions are not being applied as expected so authorized users are not being allowed to view content. From looking at the network calls, it looks like the calls for authorization are happening client-side and coming from the client's IP rather than the EZProxy IP since it's hitting the backend. Does anybody have a working EZProxy stanza that works for IP-based group assignment, or an idea otherwise that might allow for off-campus access to IP-bound items? I'm happy to provide more specific information, but logs have not been super helpful here either and have very little in them I have found pointing to this situation. Thanks, Ed Hill Pronouns: He/Him (pronoun statement<https://pronouns.colostate.edu/>) Developer and Applications Administrator (970) 491-3197<tel:(970)%20491-3197> Colorado State University Libraries [https://groups.google.com/group/dspace-tech/attach/2d4f371ee4ca4/Outlook-qbirwq1e.png?part=0.1&view=1] -- All messages to this mailing list should adhere to the Code of Conduct: https://www.lyrasis.org/about/Pages/Code-of-Conduct.aspx --- You received this message because you are subscribed to the Google Groups "DSpace Technical Support" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]<mailto:[email protected]>. To view this discussion on the web visit https://groups.google.com/d/msgid/dspace-tech/3fd5faf9-42ea-4701-8412-e112e9a0db22n%40googlegroups.com<https://groups.google.com/d/msgid/dspace-tech/3fd5faf9-42ea-4701-8412-e112e9a0db22n%40googlegroups.com?utm_medium=email&utm_source=footer>. ________________________________ "The contents of this e-mail (including any attachments) may be confidential and/or subject to copyright. Any unauthorised use, distribution, or copying of the contents is expressly prohibited. If you have received this e-mail in error, please advise the sender by return e-mail or telephone and then delete this e-mail together with all attachments from your system." -- All messages to this mailing list should adhere to the Code of Conduct: https://www.lyrasis.org/about/Pages/Code-of-Conduct.aspx --- You received this message because you are subscribed to the Google Groups "DSpace Technical Support" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/dspace-tech/ME3PR01MB75243076D66C956E152A7929C5B4A%40ME3PR01MB7524.ausprd01.prod.outlook.com.
